Report Overview
Submitted URL
r5---sn-qxo7rn7y.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?mh=-w&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxos676&req_id=52a80fab129b2a16&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.226&mm=28&mn=sn-qxo7rn7y&ms=nvh&mt=1713837372&mv=m&mvi=5&rmhost=r2---sn-qxo7rn7y.gvt1.com&smhost=r4---sn-qxo7rn7k.gvt1.com
IP
173.194.55.74
ASN
#15169 GOOGLE
Submitted
2024-04-23 02:04:08
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
r5---sn-qxo7rn7y.gvt1.com | unknown | 2008-03-03 | 2023-07-08 | 2024-04-18 | 783 B | 5.1 MB | 173.194.55.74 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
r5---sn-qxo7rn7y.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?mh=-w&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxos676&req_id=52a80fab129b2a16&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.226&mm=28&mn=sn-qxo7rn7y&ms=nvh&mt=1713837372&mv=m&mvi=5&rmhost=r2---sn-qxo7rn7y.gvt1.com&smhost=r4---sn-qxo7rn7k.gvt1.com
IP
173.194.55.74
ASN
#15169 GOOGLE
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.1 MB (5097580 bytes)
Hash
96698f7eafa0d19026177d2d1594b283
c6456d18c6e7adaa34c3f3be3744c7dd025871bf
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
widevinecdm.dll | e2ece2e61f18b9278f27032c1a5578ea
| PE32+ executable (DLL) (console) x86-64, for MS Windows, 9 sections | |||
widevinecdm.dll.sig | e33e82c5ee8733eb0b5ed12b1d6efcbe | data | |||
manifest.json | 69236425227c0bd3e5c21034285822e8 | JSON text data | |||
LICENSE.txt | 49ddb419d96dceb9069018535fb2e2fc | ASCII text | |||
widevinecdm.dll.lib | 7b98bf0cac6eb205d354fcfa7473d2b9 | current ar archive |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | meth_get_eip |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
r5---sn-qxo7rn7y.gvt1.com/edgedl/widevine-cdm/4.10.1582.2-win-x64.zip?mh=-w&pl=27&shardbypass=sd&redirect_counter=1&rm=sn-qxos676&req_id=52a80fab129b2a16&cms_redirect=yes&cmsv=e&ipbypass=yes&mip=107.178.194.226&mm=28&mn=sn-qxo7rn7y&ms=nvh&mt=1713837372&mv=m&mvi=5&rmhost=r2---sn-qxo7rn7y.gvt1.com&smhost=r4---sn-qxo7rn7k.gvt1.com | 173.194.55.74 | 200 OK | 5.1 MB | |
HTTP Headers
| ||||